Vrestavia ← Back to Home
Data Protection & Transparency

Privacy Policy

Last updated: February 2, 2026

1. Overview and Data Controller

This Privacy Policy explains how Vrestavia ("we", "us", or "our") collects, uses, stores, and protects personal data when you interact with our website, analytics dashboards, and trading technologies. Vrestavia acts as the data controller in respect of your personal data under the UK Data Protection Act 2018 and the retained UK General Data Protection Regulation (UK GDPR).

We are dedicated to safeguarding the privacy and confidentiality of individuals who interact with our services and maintaining the highest technical standards of cryptographic security.

2. Information We Collect

We may process several categories of information, depending on how you interact with our Platform:

  • Identity and Contact Data: Includes your full name, email address, telephone number, and residential jurisdiction provided during platform onboarding or direct correspondence.
  • Technical and Usage Data: Includes Internet Protocol (IP) addresses, browser type, operating system, device identifiers, session timestamps, and page interaction telemetry.
  • Configuration and API Data: User-configured trading preferences, selected algorithmic threshold values, read-only third-party exchange keys, and analytical telemetry. We do not store exchange withdrawal permissions.
  • Communication Data: Records of queries, customer support exchanges, and technical assistance notes.

3. Legal Bases for Data Processing

Under the UK GDPR, we only process your personal data when we have a recognized legal justification:

  • Contractual Performance: Processing necessary to provide platform access, deliver analytical calculations, and maintain account functions.
  • Legitimate Interests: Optimizing system stability, detecting unauthorized access or fraudulent activity, enhancing model precision, and securing our digital infrastructure.
  • Legal and Regulatory Obligations: Compliance with financial compliance protocols, anti-fraud guidelines, and legitimate requests by statutory enforcement authorities.
  • Consent: Where you have explicitly opted into receiving promotional communications or non-essential telemetry tracking. You may withdraw consent at any time.

4. Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal information to third parties. We may disclose your data only under strictly regulated conditions to:

  • Trusted infrastructure service providers, including cloud hosting vendors, cybersecurity auditors, and encrypted database facilities.
  • Professional advisers including solicitors, compliance consultants, and accounting firms under strict confidentiality obligations.
  • Competent regulatory authorities, law enforcement bodies, or judicial agencies where compelled by applicable law or court order.

5. International Data Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure adequate levels of protection are maintained through recognized transfer mechanisms, including UK International Data Transfer Agreements (IDTA) or European Commission Standard Contractual Clauses (SCCs).

6. Data Retention and Cryptographic Security

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including compliance with statutory tax, accounting, and anti-fraud recordkeeping duties. When data is no longer required, it is permanently deleted or anonymized.

We implement industry-standard technical measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, strict access control matrices, and routine vulnerability audits to prevent accidental loss, alteration, or unauthorized disclosure.

7. Your Statutory Rights

Under UK data protection laws, you possess fundamental rights regarding your personal information:

  • The right to request access to the personal data we hold about you.
  • The right to request correction of inaccurate, incomplete, or outdated data.
  • The right to request erasure of your data under specific statutory circumstances.
  • The right to object to or request restriction of data processing.
  • The right to data portability to obtain and reuse your personal records.

You may exercise any of these rights by reaching out to our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Updates to this Policy

We reserve the right to amend this Privacy Policy periodically to reflect technological, operational, or legal developments. Significant updates will be highlighted via our website notices.